Privacy Policy
Effective date: 4 August 2026 Last updated: 15 September 2026
PracticeBuds is operated by Root and Rise Enterprises, a sole proprietorship registered in India at House No. 499, Sector 31, Gurgaon, Haryana 122001, India ("PracticeBuds", "we", "us").
This policy explains what happens to information when you visit PracticeBuds. It is written to be read. If anything is unclear, email contact@practicebuds.com and we will answer in plain language.
1. The short version
- PracticeBuds is for adults — parents, guardians, tutors and teachers — who print practice worksheets for children.
- An account is required to download a worksheet. You sign in with Google. We store your account identifier, email address, a record of the worksheets you have downloaded, and — if you use one — your membership and free-trial status.
- We may offer new members a free trial of Premium access from time to time, and Premium membership can also be purchased. If you purchase a membership, we never see or store your card details — payment is handled entirely by our payment processor (Razorpay for customers billed in India), and we keep only a transaction and membership record, not payment credentials.
- Browsing PracticeBuds without an account still collects only basic website analytics and standard server logs.
- The grade level you pick is stored in your own browser, not on our servers.
- We do not sell or share personal information.
- We do not currently display advertising. If that changes, this policy will be updated before any advertising technology goes live.
- We do not knowingly collect information from children, whether or not you have an account or a paid membership. See our Children's Privacy Notice.
2. Scope
This policy covers the PracticeBuds website and any subdomains we operate. It does not cover third-party websites you reach by clicking a link from PracticeBuds, including our payment processor.
PracticeBuds is intended for people aged 18 or over. A child may of course use a worksheet you printed for them, and may view pages with you — but the site has no games, no chat, no uploads and no child profiles. Sign-in exists solely for the adult account holder.
3. What we collect today
3.1 Account information
You can browse and preview PracticeBuds without an account. Downloading or printing a worksheet requires signing in with Google. When you do, we store:
| Data | Why |
|---|---|
| Internal account identifier and email address | To operate your account and, if needed, contact you about it |
| Timestamp of your 18-or-over confirmation and the terms version you agreed to | To keep evidence of the attestation described in our Terms of Use |
| Worksheets you have downloaded (skill, format, difficulty and seed, with a timestamp) | To let you re-download a worksheet for free, and to enforce Free-tier download limits |
| Membership and free-trial records (tier, start and end dates, source of the grant) | To determine what you can access, and whether you have already used your free trial |
| Transaction and membership metadata for any purchase (amount, currency, date, payment processor's reference) | To administer your membership and for our own accounting and tax records |
We do not request your name, profile photo, or Google contacts, and we do not ask for a date of birth.
3.2 What we do not collect about payment
If you purchase a paid membership, your card number, CVV, UPI ID or other full payment credentials are entered directly with our payment processor and never pass through or are stored on our systems. We receive only a transaction reference and status (for example, "paid," "refunded") from the processor. See Section 7 for who our payment processor is.
3.3 Information you send us voluntarily
If you email us or use a contact form, we receive your email address and whatever you write. We use it only to reply to you.
Please do not send us your child's name, age, school or any other information about a child. We do not need it and we do not want to hold it.
3.4 Information collected automatically
Loading a page causes the following to be received by us or by services acting for us:
- IP address — used transiently for routing, security and coarse country-level analytics; not used to build a profile of you
- Browser type, operating system and device category
- Referring page and pages viewed on PracticeBuds
- Date and time of visit
- A randomly generated analytics identifier stored in a cookie
3.5 Stored on your device, not with us
Your selected grade level is written to your browser's local storage under the key playworld_grade. It never leaves your device and is never transmitted to us. Clearing your browser data removes it.
"Grade 2" is a content filter, not a fact about a person. We never ask for a child's real age or date of birth.
3.6 What we deliberately do not collect
Children's names, ages, dates of birth or photographs; school, class or district identifiers; precise geolocation; biometric identifiers; worksheet answers, scores or progress of any kind; contact lists; advertising identifiers; card numbers or other full payment credentials (see Section 3.2).
Worksheets are completed on paper, offline. Nothing a child writes is ever known to us.
4. Cookies and similar technologies
This is the complete list of what runs on PracticeBuds. If something is not here, it is not on the site.
Strictly necessary
| Name | Set by | Purpose | Duration |
|---|---|---|---|
playworld_grade | PracticeBuds — browser local storage, not a cookie | Remembers your selected grade on your device only | Until you clear browser data |
playworld_consent | PracticeBuds | Records your cookie preference so we do not ask again | 6 months |
| Session / security tokens | PracticeBuds, Vercel | Request routing, load balancing, abuse prevention | Session |
Analytics — optional
| Name | Set by | Purpose | Duration |
|---|---|---|---|
_ga | Google Analytics | Distinguishes one browser from another so visits are counted once | 14 months |
_ga_<ID> | Google Analytics | Maintains session state | 14 months |
How our analytics is configured: advertising features off, Google Signals off, ad personalization signals off, remarketing off, user-ID and cross-device tracking off, IP addresses not stored, data retention set to 14 months with automatic deletion, no export to any advertising platform.
Not present on PracticeBuds at this time: advertising cookies, ad networks or ad servers; social media pixels (Meta, TikTok, LinkedIn, X); session recording or heat mapping; cross-site tracking; data brokers; fingerprinting. If any of these is introduced, this page is updated before it goes live.
Your choices. Use the cookie preferences link in the site footer to accept or reject analytics at any time. Rejecting has no effect on your ability to browse, generate or print anything. All major browsers also let you block or delete cookies. We honour the Global Privacy Control signal; because there is no agreed standard for Do Not Track, we do not respond to DNT separately.
5. Persistent identifiers and internal operations
Analytics cookies are persistent identifiers, which children's privacy law treats as personal information. Being specific matters here.
The internal operations these identifiers support are:
- Distinguishing a returning visit from a new one, so page counts are not inflated
- Understanding which subjects, grades and worksheets are used, to guide what we build next
- Detecting and preventing scraping, fraud and abuse
- Diagnosing errors and monitoring site performance
How we ensure they are not used for anything else: advertising features, Google Signals, ad personalization and remarketing are disabled in our analytics configuration; cross-device and user-ID tracking are off; analytics data is not exported to any advertising platform; and these identifiers are not used to contact, recognize or profile any individual.
If we later introduce advertising or any other new use of these identifiers, we will update this policy first and obtain consent where the law requires it.
6. Why we use information
Where Indian law applies, we process personal data as a Data Fiduciary under the Digital Personal Data Protection Act, 2023, on the basis of your consent or for the legitimate uses permitted by that Act.
Where the UK or EU GDPR applies to you, our legal bases are legitimate interests (operating, securing and improving PracticeBuds, and replying to your messages — assessed as not overriding your rights, given the limited data involved and that it is not used for profiling or sold), consent (analytics cookies where consent is required, and marketing email), and legal obligation.
7. Who receives information
We do not sell personal information. We do not share it for cross-context behavioral advertising. We do not disclose it to data brokers.
| Provider | Role | Location |
|---|---|---|
| Vercel Inc. | Website hosting and content delivery | United States / global edge network |
| Supabase | Database and file storage | India (Mumbai region) |
| Google LLC | Sign-in (Google account authentication) and website analytics | United States |
| Razorpay Software Private Limited | Payment processing for purchases billed in India | India |
If this list changes, we will update this page before the change takes effect. Customers billed outside India are processed by a payment processor we will name here once selected.
We may also disclose information where legally required, to establish or defend legal claims, to prevent fraud or harm, or in connection with a sale of the business — in which case we will give notice before your information becomes subject to a different policy.
We may publish aggregate, de-identified statistics such as which topic was most printed in a month. This cannot identify you and we will not attempt to re-identify it.
8. Where information is held
PracticeBuds is operated from India, and our database and file storage are hosted in India (Mumbai). Our website hosting and analytics providers are based in the United States.
If you are outside India, information relating to you will be transferred to and stored in countries other than your own, which may have different data protection laws. Where required for UK or EEA visitors, we rely on the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum, together with our providers' own transfer frameworks.
9. How long information is kept
We keep personal data only as long as needed for the purpose it was collected, and we do not retain it indefinitely.
| Category | Retention |
|---|---|
| Account data (identifier, email, attestation record) | Until you delete your account, then removed within 30 days |
| Download history | Until you delete your account, then removed within 30 days |
| Membership and free-trial records | Until you delete your account, then removed within 30 days, except as described below for billing records |
| Transaction and billing records | As required by applicable tax and accounting law, even if you delete your account sooner |
| Analytics data | 14 months, then automatically deleted |
| Server and security logs | 30 days |
| Email correspondence | 24 months from last contact |
| Mailing list subscription | Until you unsubscribe, then 30 days |
Backups may persist up to 30 days beyond these periods before being overwritten.
10. Security
We maintain security measures proportionate to the small amount of data we hold: encryption in transit (TLS) and at rest; row-level security on every database table; least-privilege access; secrets held in a managed secret store and never in source code; and dependency and vulnerability monitoring.
No system is perfectly secure. If a breach affects personal data we will notify affected people and the relevant regulator as required by law, including the Data Protection Board of India where applicable.
11. Your rights
Depending on where you live, you may have the right to access the information we hold about you, correct it, delete it, obtain a portable copy, withdraw consent, object to processing, opt out of sale or targeted advertising (we do neither), appeal a decision we make, nominate another person to exercise your rights on your behalf (India), and complain to a supervisory authority. You will never be treated differently for exercising any of these.
To exercise a right, email contact@practicebuds.com with the subject line "Privacy Request". We will acknowledge within 10 business days and respond within 30 days, or sooner where the law requires. We verify identity proportionately — usually by replying to the address on file.
California residents: we have not sold or shared personal information in the preceding 12 months. Categories collected: identifiers and internet activity information, as described in Section 3. We collect no sensitive personal information.
12. Children
PracticeBuds is directed to adults. We do not knowingly collect personal information from children. This is true whether or not you have an account, and whether you use a Free or Premium membership — our account, download-history and membership systems only ever hold information about the adult account holder. Please read our Children's Privacy Notice, which sets out our approach in full and how a parent or guardian can contact us.
Under India's Digital Personal Data Protection Act, 2023, a child is anyone under 18. Under the US Children's Online Privacy Protection Act, a child is anyone under 13. We apply the stricter standard.
13. Accounts
An account is required to download or print a worksheet.
- Sign-in uses Google, and we request the minimum scopes needed — an identifier and email address. We do not request your name, profile photo or contacts.
- You are asked to confirm you are 18 or over at sign-in. We do not ask for, or store, a date of birth.
- We store what is needed to run your account and membership: an internal user identifier, your email address, your attestation record, your download history, and your membership/free-trial records, as described in Section 3.1.
- We do not store any information about a child, and there is no field anywhere in which to enter a child's name.
- Membership does not renew automatically; see our Terms of Use for how paid membership periods work.
- You can delete your account at any time from within the product. Account data, download history and membership records are removed within 30 days of deletion, except for transaction and billing records, which we keep as long as required by tax and accounting law (see Section 9).
14. Links to other sites
PracticeBuds may link elsewhere — to curriculum standards or educational research, for example. We do not control those sites and this policy does not apply to them.
15. Changes
Material changes will be posted here with a revised date and a notice on the site. Information already collected remains governed by the policy in force when it was collected, unless you consent otherwise.
16. Contact
Email: contact@practicebuds.com Root and Rise Enterprises House No. 499, Sector 31, Gurgaon, Haryana 122001, India
Grievances relating to personal data may be raised at the address above. If you are in the UK or EEA and are unsatisfied with our response, you may complain to your national supervisory authority. In India, you may approach the Data Protection Board.